South Korean Cyber Security Threats, Governance Measures, and Implications for SMEs
2
조회
0
다운로드
2
인용
0
참고문헌
키워드
초록
This paper provides an assessment of current cyber security threats in SouthKorea and its national cyber security governance measures. Particularly,through a detailed examination of relevant literature, we critically evaluatethe extent to which its national governance is structured to protect itsSMEs. We discover and discuss the key cyber security threats in South Korea,including cyberterrorism, cyber financial and trade fraud. We criticallyassess existing mitigation measures to reduce these threats, including keygovernment agendas, reporting mechanisms, and other initiatives. We revealthat the governance is still operating under a post-crime orientation ofpunishment rather than the pre-crime logic of prevention. It features anabsence of i) a national cyber security framework; ii) an issue-basedapproach for governance initiatives; and iii) localised reporting mechanisms. As a result, it needs to increase attention to the cyber security risks facedby SMEs and to embrace a proactive response system.
Abstract
This paper provides an assessment of current cyber security threats in SouthKorea and its national cyber security governance measures. Particularly,through a detailed examination of relevant literature, we critically evaluatethe extent to which its national governance is structured to protect itsSMEs. We discover and discuss the key cyber security threats in South Korea,including cyberterrorism, cyber financial and trade fraud. We criticallyassess existing mitigation measures to reduce these threats, including keygovernment agendas, reporting mechanisms, and other initiatives. We revealthat the governance is still operating under a post-crime orientation ofpunishment rather than the pre-crime logic of prevention. It features anabsence of i) a national cyber security framework; ii) an issue-basedapproach for governance initiatives; and iii) localised reporting mechanisms. As a result, it needs to increase attention to the cyber security risks facedby SMEs and to embrace a proactive response system.
참고문헌 (55)
- 2016 Internet banking service usages, "Bank of Korea", TSO, ~ (2017)
- 장항배, "중소기업 산업기술 유출방지를 위한 정보보호 관리체계 설계", 멀티미디어학회논문지, 13(1), pp.111~121 (2010), 한국멀티미디어학회
- 최진혁, "산업보안의 제도적 발전방안 연구: 미국 사례를 중심으로", 시큐리티연구, (22), pp.197~230 (2010), 한국보안관리학회
- 홍준석, "중소기업 유해트래픽 분석을 통한 보안관제 개선 방안", 한국전자거래학회지, 19(4), pp.195~204 (2014), 한국전자거래학회[DOI]
- "South Korean military is defeated by North Korean cyber warfare…’Need to change an awareness of military operations’" (2016)[URL]
- Jang, Y., "A study on the national cybercrime strategy: Toward the improvement of Korean cyber policing policies applying a logic model", Doctor, pp.2014
- "North Korea hacked smartphones of 40 South Korean government officials in foreign and security positions" (2016)[URL]
- 정병수, "산업보안의 연구경향 분석 - 학술연구정보서비스(2000년~2011년)를 중심으로", 한국치안행정논집, 9(2), pp.195~215 (2012), 한국치안행정학회[DOI]
- 강정호, "국외 주요국과 북한의 사이버전 수행전략 및 기술 비교분석을 통한 대응방향", 보안공학연구논문지, 13(4), pp.287~298 (2016), 보안공학연구지원센터[DOI]
- 김지현, "헌법의 관점에서 본 사이버 보안컨트롤 타워 제도 구축에 관한 고찰", 보안공학연구논문지, 11(1), pp.25~40 (2014), 보안공학연구지원센터[DOI]
- 김태계, "사이버테러 범죄 대응에 관한 제도적 문제점과 대책", 법과정책연구, 14(3), pp.1337~1381 (2014), 한국법정책학회[DOI]
- 김양현, "북한의 대남 사이버테러 사례연구", 한국테러학회보, 7(2), pp.5~21 (2014), 한국테러학회
- 김소영, "일반 사용자를 위한 포털 사이트 경유피싱", 파밍 방지 방안, 2015, pp.40(6), 1107~1113[DOI]
- "Youths face justice after joining voice phishing in China" (2016)[URL]
- 김도승, "국가 사이버 안보의 법적 과제", 미국헌법연구, 28(2), pp.99~130 (2017), 미국헌법학회
- 김지용, "전자무역사기 동향 분석 및 대응방안 -E-mail 해킹 사례를 중심으로-", e-비즈니스연구, 18(6), pp.265~277 (2017), 국제e-비즈니스학회[DOI]
- 황기식, "한국 사이버안보 대응체제에 관한 민⋅관 인식의 격차", 국가안보와 전략, 17(2), pp.81~120 (2017), 국가안보전략연구원[DOI]
- Korea Internet & Security Agency, "A manual for Information Security Management System", TSO, ~ (2016)
- 권장기, "자원 제약하의 중소기업 정보보안계획 수립방안 연구", 융합정보논문지, 7(2), pp.119~124 (2017), 중소기업융합학회[DOI]
- 곽병선, "사이버테러 대응을 위한 법체계 검토", 법학연구, (59), pp.1~24 (2015), 한국법학회
- 이창무, "산업보안 개념의 비판적 고찰", 시큐리티연구, (50), pp.285~304 (2017), 한국보안관리학회[DOI]
- Lee, M., "Suspension of bank accounts as public-private partnership for eradication of voice phishing", Policy Symposium, 2014(4), pp.73~77 (2014)
- A study on estimating economic damages from Internet incidents for cybersecurity insurance, "Ministry of Science, ICT and Future Planning", TSO, ~ (2013)
- "13 major export items" (2015)[URL]
- National Intelligence Service, "National information protection White Paper" (2015), TSO
- National Police Agency, "National Police White Paper" (2013), TSO
- National Police Agency, "National Police White Paper" (2014), TSO
- National Police Agency, "National Police White Paper" (2015), TSO
- National Police Agency, "National Police White Paper" (2016), TSO
- An annual report of cyber one-stop centre 2016, "National Police Agency", TSO, ~ (2017)
- National Police Agency, "National Police White Paper" (2017), TSO
- A report on trade fraud, "National Police Agency", ~ (2018)
- National Statistical Office, "Nationwide business statistics 2016", TSO, ~ (2017)
- 박태형, "중소기업 산업보안 강화를 위한 지방정부의 역할 분석연구-경기도 사례에 대한 실증분석을 중심으로-", 디지털융복합연구, 11(10), pp.1~16 (2013), 한국디지털정책학회
- 윤재석, "국가 사이버보안 전략 수립과 개선을 위한 참조 모델 개발", 융합보안 논문지, 16(4), pp.53~61 (2016), 한국융합보안학회
- Beccerra, M., "Trust within the organization : Integrating the trust literature with agency theory and transaction costs economics", Public Administration Quarterly, 23(2), pp.177~203 (1999)
- Beck, U., "Risk society: Toward a new modernity" (1992), Sage
- Dojkovski, S., "Fostering information security culture in small and medium size enterprises: An interpretive study in Australia", Proceedings of the 15th European Conference on Information Systems, pp.1560~1571 (2007)
- Gajar, P. K., "Bring your own device(BYOD) : Security risks and mitigating strategies", Journal of Global Research in Computer Science, 4(4), pp.62~70 (2013)
- Assessing cyber security: A meta-analysis of threats, trends, and responses to cyber-attacks, "Gehem, M.", The Hague Centre for Strategic Studies, ~ (2015)
- Holtfreter, K., "Challenges for cybercrime theory, research, and policy", The Norwich Review of International and Transnational Crime, pp.54~66 (2015)
- Cybercrime: A review of the evidence, "McGuire, M.", Home Office Research, ~, pp.Home Office Research Report 75 (2013)
- Organisation for Economic Co-operation and Development, "OECD broadband statistics", ~ (2018)
- "Internet security threat report" (2017)[URL]
- Truong, D., "How cloud computing enhances competitive advantages: A research model for SMEs", The Business Review, 15(1), pp.59~65 (2010)
- Wall, D., "Cybercrime" (2007), Polity
- Wall, D., "Policing cybercrimes: Situating the public police in networks of security within cyberspace", Police Practice and Research, 8(2), pp.183~205 (2007)
- Yar, M., "Cybercrime and society" (2013), Sage
- Zedner, L., "Pre-crime and post-criminology?", Theoretical criminology, 11(2), pp.261~281 (2007)
- "Prevention procedures"[URL]
- Financial Supervisory Service, "Comprehensive measures for the prevention of electronic financial fraud", ~ (2013)
- "ICT facts & figures" (2016)[URL]
- Korea International Trade Association, "This is how to prevent trade fraud via email hacking", ~ (2015)
- "An information security operations service"[URL]
- "New measures for the protection of intellectual properties of SMEs" (2011)[URL]